pkg syscall (darwin-arm64), const SO_NP_EXTENSIONS ideal-int
pkg syscall (darwin-arm64), const SO_NREAD = 4128
pkg syscall (darwin-arm64), const SO_NREAD ideal-int
pkg syscall (darwin-arm64), const SO_NUMRCVPKT = 4370
pkg syscall (darwin-arm64), const SO_NUMRCVPKT ideal-int
pkg syscall (darwin-arm64), const SO_NWRITE = 4132
pkg syscall (darwin-arm64), const SO_NWRITE ideal-int

pkg syscall (netbsd-arm64), const SO_SNDLOWAT = 4099
pkg syscall (netbsd-arm64), const SO_SNDLOWAT ideal-int
pkg syscall (netbsd-arm64), const SO_SNDTIMEO = 4107
pkg syscall (netbsd-arm64), const SO_SNDTIMEO ideal-int
pkg syscall (netbsd-arm64), const SO_TIMESTAMP = 8192
pkg syscall (netbsd-arm64), const SO_TIMESTAMP ideal-int
pkg syscall (netbsd-arm64), const SO_TYPE = 4104

This release brings additional power to both local storage and Persistent Volumes. [Mount namespace propagation](https://github.com/kubernetes/enhancements/issues/432) allows a container to mount a volume as rslave so that host mounts can be seen inside the container, or as rshared so that mounts made inside a container can be seen by the host. (Note that this is [not supported on Windows](https://github.com/kubernetes/kubernetes/pull/60275).) [Local Ephemeral Storage Capacity Isolation](https:/...

creation of dedicated nodes with extended resources. If operators want to create dedicated nodes with extended resources (such as GPUs, FPGAs, and so on), they are expected to taint the node with extended resource name as the key. This admission controller, if enabled, automatically adds tolerations for such taints to pods requesting extended resources, so users don't have to manually add these tolerations. ([#55839](https://github.com/kubernetes/kubernetes/pull/55839),[ @mindprince](https://github.com/mindprince))...

* Fixed the webhook admission plugin so that it works even if the apiserver and the nodes are in two networks (e.g., in GKE). ([#50476](https://github.com/kubernetes/kubernetes/pull/50476), [@caesarxuchao](https://github.com/caesarxuchao))

    * To avoid that negative effect only use per pod metrics from pods that are:
    * - ready (so metrics about them should be valid), or
    * - unready but creation and last readiness change timestamps are apart more than 10s (pods that have formerly been ready and so metrics are in at least some cases (pod becoming unready because of overload) very useful).

### CSI Health Monitoring

* Add /bin/mkfifo symlink to bazel build for busybox, so that CI builds have /bin/tee ([#59268](https://github.com/kubernetes/kubernetes/pull/59268), [@justinsb](https://github.com/justinsb))

* Increase Azure default maximumLoadBalancerRuleCount to 250. ([#72621](https://github.com/kubernetes/kubernetes/pull/72621), [@feiskyer](https://github.com/feiskyer))
* Fixes a NPD bug on GCI, so that it disables glog writing to files for log-counter ([#76211](https://github.com/kubernetes/kubernetes/pull/76211), [@wangzhen127](https://github.com/wangzhen127))

  
  As this code is still very new, it has not been heavily optimized yet;
  while it is expected to _eventually_ have better performance than the
  iptables backend, very little performance testing has been done so far. ([#121046](https://github.com/kubernetes/kubernetes/pull/121046), [@danwinship](https://github.com/danwinship))